date:20170308

Re: [CentOS] Up to date guide/information Sendmail SMTP Auth

2017-03-08 Thread Mark Weaver


On 03/08/2017 07:09 PM, Mark Weaver wrote:

On 03/08/2017 06:42 PM, Paul Heinlein wrote:
> On Wed, 8 Mar 2017, Mark Weaver wrote:
>
> > On 03/08/2017 11:00 AM, Paul Heinlein wrote:
> >> On Wed, 8 Mar 2017, Mark Weaver wrote:
> >>
> >> > Hello all,
> >> >
> >> > I've been googling my brains out since yesterday looking for
> >> > up-to-date information on this matter, and have found
> >> > information that is anywhere from 15 to 5 years old. I'd really
> >> > like some information that much more up to date on the subject.
> >> > Specifically configuring Sendmail SMTP authentication (_no smart
> >> > host stuff_).
> >>
> >> I wrote this article years ago:
> >>
> >> https://www.madboa.com/geek/sendmail-auth/
> >>
> >> The configuration outlined there is essentially unchanged today. I
> >> have it running on a CentOS 7 machine with sendmail 8.14.
> >>
> >> The only real change is the SOCKETDIR setting in
> >> /etc/sysconfig/saslauthd, which is now /run/saslauthd (rather than
> >> /var/run/saslauthd). And, of course, I use systemctl rather
> >> thachkconfig to control boot-time behavior.
> >
> > Hi Paul,
> >
> > I followed your guide to the letter, however I think it seems I
> > missed something. When I test with telnet to port 25 this is the
> > result:
> >
> >> telnet merlin 25
> > Trying 10.10.3.6...
> > Connected to merlin.ciss.local.
> > Escape character is '^]'.
> > 220 mdw1982.com ESMTP Sendmail 8.14.7/8.13.8; Wed, 8 Mar 2017
> 16:53:31 -0500
> > ehlo merlin
> > 250-mdw1982.com Hello [10.10.3.102], pleased to meet you
> > 250-ENHANCEDSTATUSCODES
> > 250-PIPELINING
> > 250-8BITMIME
> > 250-SIZE
> > 250-DSN
> > 250-ETRN
> > 250-DELIVERBY
> > 250 HELP
> >> auth login
> > 504 5.3.3 AUTH mechanism login not available
> >
> > thoughts?
>
> Many. :-)
>
> Check your mail log for clues.
>
> Ensure you have a valid SSL certificate and key. Sendmail is touchy
> about permissions on the key file. Try googling for
> confDONT_BLAME_SENDMAIL and GroupReadableKeyFile.
>
> Make sure saslauthd is configured and running.
>
> Compile your .mc (m4) file with the macros distributed with the
> version of sendmail you're actually running. This line suggests you're
> not:
>
> mdw1982.com ESMTP Sendmail 8.14.7/8.13.8
>
> That's a first stab at things to try.
>
I fixed the version mis-match by installing sendmail-cf package and
recompiling sendmail.mc. saslauthd is running and conigured according to
your specs. So, I'm not sure what's missing.
Still googling around and found some things that appear to be missing 
from the sendmail config, but when I test saslauthd it doesn't appear to 
be working.


testsaslauthd -u username -p mypassword
0: NO "authentication failed"



___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] From Networkmanager to self managed configuration files

2017-03-08 Thread isdtor

Did I see an implicit "do as Red Hat says or else" there somewhere? Not 
appropriate. Linux is not Windows (yet). In the heat of the moment it may 
easily be forgotton that Linux is all about choice. We choose to run CentOS, 
and we choose to run it the way we see fit. We appreciate the efforts that go 
into the *Community* *Enterprise* OS, and if you have dealt with buggy crap 
like Ubuntu or Fedora, you appreciate it even more. This does not imply 
deference to upstream.

That statement about "effectively [running] your own Linux distribution" is 
scaremongering, at best. If there's one thing I've learned on this list, it's 
realizing how many use cases, scenarios and solutions there are that can make 
approaching the topic at hand without prejudice challenging at times.

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

[CentOS] another SMTP auth question

2017-03-08 Thread Fred Smith

My ISP has just informed me that we will soon be required to authenticate
when connecting to their smtp server, so I've been looking around on the
web for how to do that with sendmail (just using auth when connecting
outward-bound, nothing else).

I've found a page here: http://www.sendmail.org/~ca/email/auth.html
that explains it simply (for simple minds, like mine) but it appears
to be old-ish.

So, I'm wondering if the recommendation of using:

define(`confAUTH_MECHANISMS', `EXTERNAL GSSAPI DIGEST-MD5 CRAM-MD5 LOGIN 
PLAIN')dnl

is still appropriate, since MD5 is known to be breakable. Are there other hash
mechanisms that can be used in SMTP for this purpose?

Also, if someone can help me understand the syntax, I'd appreciate it:
does EXTERNAL mean some external tool not specified here? if so, how
is it specified? what such tools would be appropriate?

is there something more robust, e.g., sha256 or similar that should
be used here instead?

is GSSAPI internal, or does the external mean EXTERNAL GSSAPI?

Thanks in advance for any tips.

Fred
-- 
---
Under no circumstances will I ever purchase anything offered to me as
the result of an unsolicited e-mail message. Nor will I forward chain
letters, petitions, mass mailings, or virus warnings to large numbers
of others. This is my contribution to the survival of the online
community.
 --Roger Ebert, December, 1996
- The Boulder Pledge -
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Up to date guide/information Sendmail SMTP Auth

2017-03-08 Thread Mark Weaver


On 03/08/2017 06:42 PM, Paul Heinlein wrote:

On Wed, 8 Mar 2017, Mark Weaver wrote:

> On 03/08/2017 11:00 AM, Paul Heinlein wrote:
>> On Wed, 8 Mar 2017, Mark Weaver wrote:
>>
>> > Hello all,
>> >
>> > I've been googling my brains out since yesterday looking for
>> > up-to-date information on this matter, and have found
>> > information that is anywhere from 15 to 5 years old. I'd really
>> > like some information that much more up to date on the subject.
>> > Specifically configuring Sendmail SMTP authentication (_no smart
>> > host stuff_).
>>
>> I wrote this article years ago:
>>
>> https://www.madboa.com/geek/sendmail-auth/
>>
>> The configuration outlined there is essentially unchanged today. I
>> have it running on a CentOS 7 machine with sendmail 8.14.
>>
>> The only real change is the SOCKETDIR setting in
>> /etc/sysconfig/saslauthd, which is now /run/saslauthd (rather than
>> /var/run/saslauthd). And, of course, I use systemctl rather
>> thachkconfig to control boot-time behavior.
>
> Hi Paul,
>
> I followed your guide to the letter, however I think it seems I
> missed something. When I test with telnet to port 25 this is the
> result:
>
>> telnet merlin 25
> Trying 10.10.3.6...
> Connected to merlin.ciss.local.
> Escape character is '^]'.
> 220 mdw1982.com ESMTP Sendmail 8.14.7/8.13.8; Wed, 8 Mar 2017 
16:53:31 -0500

> ehlo merlin
> 250-mdw1982.com Hello [10.10.3.102], pleased to meet you
> 250-ENHANCEDSTATUSCODES
> 250-PIPELINING
> 250-8BITMIME
> 250-SIZE
> 250-DSN
> 250-ETRN
> 250-DELIVERBY
> 250 HELP
>> auth login
> 504 5.3.3 AUTH mechanism login not available
>
> thoughts?

Many. :-)

Check your mail log for clues.

Ensure you have a valid SSL certificate and key. Sendmail is touchy
about permissions on the key file. Try googling for
confDONT_BLAME_SENDMAIL and GroupReadableKeyFile.

Make sure saslauthd is configured and running.

Compile your .mc (m4) file with the macros distributed with the
version of sendmail you're actually running. This line suggests you're
not:

mdw1982.com ESMTP Sendmail 8.14.7/8.13.8

That's a first stab at things to try.

I fixed the version mis-match by installing sendmail-cf package and 
recompiling sendmail.mc. saslauthd is running and conigured according to 
your specs. So, I'm not sure what's missing.

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Up to date guide/information Sendmail SMTP Auth

2017-03-08 Thread Paul Heinlein

On Wed, 8 Mar 2017, Mark Weaver wrote:

On 03/08/2017 11:00 AM, Paul Heinlein wrote:

 On Wed, 8 Mar 2017, Mark Weaver wrote:

>  Hello all,
>
>  I've been googling my brains out since yesterday looking for 
>  up-to-date information on this matter, and have found 
>  information that is anywhere from 15 to 5 years old. I'd really 
>  like some information that much more up to date on the subject. 
>  Specifically configuring Sendmail SMTP authentication (_no smart 
>  host stuff_).

 I wrote this article years ago:

 https://www.madboa.com/geek/sendmail-auth/

 The configuration outlined there is essentially unchanged today. I
 have it running on a CentOS 7 machine with sendmail 8.14.

 The only real change is the SOCKETDIR setting in
 /etc/sysconfig/saslauthd, which is now /run/saslauthd (rather than
 /var/run/saslauthd). And, of course, I use systemctl rather
 thachkconfig to control boot-time behavior.

Hi Paul,

I followed your guide to the letter, however I think it seems I 
missed something. When I test with telnet to port 25 this is the 
result:

 telnet merlin 25

Trying 10.10.3.6...
Connected to merlin.ciss.local.
Escape character is '^]'.
220 mdw1982.com ESMTP Sendmail 8.14.7/8.13.8; Wed, 8 Mar 2017 16:53:31 -0500
ehlo merlin
250-mdw1982.com Hello [10.10.3.102], pleased to meet you
250-ENHANCEDSTATUSCODES
250-PIPELINING
250-8BITMIME
250-SIZE
250-DSN
250-ETRN
250-DELIVERBY
250 HELP

 auth login

504 5.3.3 AUTH mechanism login not available

thoughts?

Many. :-)

Check your mail log for clues.

Ensure you have a valid SSL certificate and key. Sendmail is touchy 
about permissions on the key file. Try googling for 
confDONT_BLAME_SENDMAIL and GroupReadableKeyFile.

Make sure saslauthd is configured and running.

Compile your .mc (m4) file with the macros distributed with the 
version of sendmail you're actually running. This line suggests you're 
not:

mdw1982.com ESMTP Sendmail 8.14.7/8.13.8

That's a first stab at things to try.

--
Paul Heinlein <> heinl...@madboa.com <> http://www.madboa.com/
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Up to date guide/information Sendmail SMTP Auth

2017-03-08 Thread Mark Weaver


On 03/08/2017 06:21 PM, Alexander Dalloz wrote:

Am 08.03.2017 um 22:57 schrieb Mark Weaver:
> On 03/08/2017 11:00 AM, Paul Heinlein wrote:
>> On Wed, 8 Mar 2017, Mark Weaver wrote:

>> I wrote this article years ago:
>>
>> https://www.madboa.com/geek/sendmail-auth/

> Hi Paul,
>
> I followed your guide to the letter, however I think it seems I missed
> something. When I test with telnet to port 25 this is the result:
>
>> telnet merlin 25
> Trying 10.10.3.6...
> Connected to merlin.ciss.local.
> Escape character is '^]'.
> 220 mdw1982.com ESMTP Sendmail 8.14.7/8.13.8; Wed, 8 Mar 2017 16:53:31

That makes your mistake obvious: the .cf version is 8.13.8 - it does not
match the Sendmail version 8.14.7. So you did not build the sendmail.cf
from the modified sendmail.mc.

Make sure you have run "yum install sendmail-cf" so that "cd /etc/mail;
make" can do what it should do.

> -0500
> ehlo merlin
> 250-mdw1982.com Hello [10.10.3.102], pleased to meet you
> 250-ENHANCEDSTATUSCODES
> 250-PIPELINING
> 250-8BITMIME
> 250-SIZE
> 250-DSN
> 250-ETRN
> 250-DELIVERBY
> 250 HELP
>> auth login
> 504 5.3.3 AUTH mechanism login not available
>
> thoughts?

Alexander

And now?

> telnet merlin 25
Trying 10.10.3.6...
Connected to merlin.ciss.local.
Escape character is '^]'.
220 mdw1982.com ESMTP Sendmail 8.14.7/8.14.7; Wed, 8 Mar 2017 18:39:51 -0500
ehlo merlin
250-mdw1982.com Hello [10.10.3.102], pleased to meet you
250-ENHANCEDSTATUSCODES
250-PIPELINING
250-8BITMIME
250-SIZE
250-DSN
250-ETRN
250-DELIVERBY
250 HELP
> auth login
504 5.3.3 AUTH mechanism login not available
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

[CentOS] Re: Firefox for CentOS

2017-03-08 Thread Yamaban

On Wed, 8 Mar 2017 16:56, Johnny Hughes wrote:

On 03/08/2017 09:39 AM, Phelps, Matthew wrote:

On Wed, Mar 8, 2017 at 10:25 AM, Johnny Hughes wrote:

On 03/08/2017 09:10 AM, m.r...@5-cent.us wrote:

Johnny Hughes wrote:

I am currently building the latest Firefox updates and I have noticed
that they have upgraded the CentOS-7 Firefox from the ESR tree (45.8) to
the mainline tree (Currently firefox-52.0). They have left EL5 and EL6
at the ESR level (45.8.0-2).

EL7:
https://rhn.redhat.com/errata/RHSA-2017-0461.html

EL5 and EL6:
https://rhn.redhat.com/errata/RHSA-2017-0459.html

As stated above, I am currently building and testing these, so they are
not yet released .. just preparing people for the changes.

Does anyone know if ESR 52.x will eventually be released for CentOS 6?

I am sure it will, certainly when version 45 goes EOL.

The variables and content to build it on EL6 are in the current EL7
SRPM, but the EL5 stuff is (understandably, since it is going EOL soon)
missing.

What I am not sure of is if EL7 will stay on the Current Release for the
next update or if it will shift back to ESR.

Eh?? There is a slight misunderstanding here.

The Firefox 52.0 Version is released for BOTH, the normal release channel
AND the ESR channel. This was done to have one 6 week periode of overlapp
between the old and the new ESR version, to "ease over" the transistion,
as the 52 version insists on GKT3 and gstreamer 1.x normally.

At this point in time there are TWO ESR releases:
the 45.8.0esr AND the 52.0esr

http://download-installer.cdn.mozilla.net/pub/firefox/releases/45.8.0esr/linux-x86_64/en-US/firefox-45.8.0esr.tar.bz2
(Last-Modified: Mon, 06 Mar 2017 16:34:18 GMT)

and:

http://download-installer.cdn.mozilla.net/pub/firefox/releases/52.0esr/linux-x86_64/en-US/firefox-52.0esr.tar.bz2
(Last-Modified: Mon, 06 Mar 2017 16:32:42 GMT)

So, if you go for 52, make sure the get the "channel" right
(esr, not release)

Pure personal opinion on 52 is still out, I'm not that hyped, some of my
'beloved' extensions / addons are no longer working on 52 vs 45.

- Yamaban.
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Up to date guide/information Sendmail SMTP Auth

2017-03-08 Thread Alexander Dalloz


Am 08.03.2017 um 22:57 schrieb Mark Weaver:

On 03/08/2017 11:00 AM, Paul Heinlein wrote:

On Wed, 8 Mar 2017, Mark Weaver wrote:



I wrote this article years ago:

https://www.madboa.com/geek/sendmail-auth/



Hi Paul,

I followed your guide to the letter, however I think it seems I missed
something. When I test with telnet to port 25 this is the result:


telnet merlin 25

Trying 10.10.3.6...
Connected to merlin.ciss.local.
Escape character is '^]'.
220 mdw1982.com ESMTP Sendmail 8.14.7/8.13.8; Wed, 8 Mar 2017 16:53:31


That makes your mistake obvious: the .cf version is 8.13.8 - it does not 
match the Sendmail version 8.14.7. So you did not build the sendmail.cf 
from the modified sendmail.mc.


Make sure you have run "yum install sendmail-cf" so that "cd /etc/mail; 
make" can do what it should do.



-0500
ehlo merlin
250-mdw1982.com Hello [10.10.3.102], pleased to meet you
250-ENHANCEDSTATUSCODES
250-PIPELINING
250-8BITMIME
250-SIZE
250-DSN
250-ETRN
250-DELIVERBY
250 HELP

auth login

504 5.3.3 AUTH mechanism login not available

thoughts?


Alexander



___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

63 matches

Mail list logo